$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft File: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json) Hash identifier: WUBeWJ+i0wMZLaELgeQk9BkRvXuh+T5yKY2XrCO3J54= Subject key identifier: B9:5D:80:3F:F2:E2:6A:9F:99:5B:E2:5C:1F:11:14:23:42:45:36:D5 Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Certificate serial: 0F9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft Manifest number: 0F7D Signing time: Fri 22 Aug 2025 17:42:40 +0000 Manifest this update: Fri 22 Aug 2025 17:42:39 +0000 Manifest next update: Fri 29 Aug 2025 17:42:39 +0000 Files and hashes: 1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: s3TeMQodi103x85l27qG05Pj/0yNZvdSJEPfVwPPrD4=) 2: B1F01F2A025C11F0BCAB0F12C4F9AE02.roa (hash: wNl2vPAfQOmVBCkud9vffEnTL87IbN3lfDYFsp2wc4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3997 (0xf9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Validity Not Before: Aug 22 17:42:39 2025 GMT Not After : Aug 29 17:42:39 2025 GMT Subject: CN=68a8ac10-b716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:80:0a:be:70:6f:bf:5c:0f:b4:9e:da:31: 13:c1:3b:61:3c:b6:bb:8b:91:76:8f:a6:62:9b:ff: 03:f2:aa:a8:84:13:a2:02:fe:87:f0:6b:f5:6a:f3: 7e:2a:b8:12:a8:1d:65:05:58:e9:70:fe:38:e0:e6: c0:43:9b:15:c3:14:7e:5d:95:e5:7b:86:00:04:bc: 11:45:84:c4:1c:9a:47:70:d9:7f:27:b2:bb:81:0b: 46:ea:9b:6d:39:c9:f4:8f:0b:07:88:1d:f0:c4:f7: a2:d2:ad:08:63:8c:75:ec:23:c4:e6:ae:a1:b3:89: 00:ae:60:32:7e:bf:a5:30:7d:e8:e8:34:78:f3:90: 88:5b:75:77:42:ae:23:8d:22:45:64:37:55:6b:c8: cc:0f:b8:d6:d4:d6:51:1d:ae:a8:e0:0f:34:20:ee: 5a:57:5e:9e:ee:8c:ec:8f:12:21:14:7e:fd:2f:1c: 65:f8:46:fc:bb:27:74:22:70:9e:f8:54:f5:d6:52: 46:97:c3:98:63:fd:71:29:8f:2e:26:96:19:8d:b9: a4:3e:c1:98:62:f9:21:be:40:33:53:35:d8:9f:e7: 4c:da:3c:51:fc:ed:82:98:ff:5c:cb:ad:0c:76:35: 5c:e6:dd:6c:7d:72:7e:aa:a1:37:04:b1:8e:40:58: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5D:80:3F:F2:E2:6A:9F:99:5B:E2:5C:1F:11:14:23:42:45:36:D5 X509v3 Authority Key Identifier: keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:1e:48:09:65:ea:4c:41:50:cb:4d:80:b1:29:76:7a:a1:7f: 31:4a:28:ec:97:b1:44:44:7f:59:71:2f:e9:1d:fd:63:8a:66: 5c:46:f7:2f:5b:ee:69:7b:cc:ac:a8:eb:2f:b4:11:45:db:02: 2f:e1:fd:56:2c:2d:04:7b:eb:af:e2:c8:7f:62:10:b4:7b:2a: 52:70:4f:c7:6b:5c:5a:76:05:7e:92:5b:77:fe:34:f7:ae:47: 7b:3b:1e:fd:c7:5e:c8:5f:a9:9c:a0:0f:a7:2c:0f:1b:11:aa: 57:b8:1c:8d:05:24:bf:94:9a:f7:f2:f3:78:19:18:22:64:af: a5:96:44:9b:3e:70:d9:54:24:ed:3e:34:f6:8c:0d:d9:e4:18: 4c:5c:96:6c:8c:de:a4:39:1c:5b:dd:78:a4:45:dd:0f:ae:7a: f2:60:23:a5:b6:d1:d6:b6:21:05:29:de:1e:e1:b0:7f:4e:87: 9b:1f:1d:f1:31:e9:22:ca:b5:b6:80:22:66:b4:ea:16:55:3a: 8b:38:ab:36:9f:b1:e3:dc:68:94:a3:55:e6:ab:93:75:b3:cc: 68:0e:e5:d9:5a:47:4f:42:bd:02:a8:e6:93:ec:05:f5:e9:db: 7b:4a:93:b4:42:7a:62:6e:5a:16:1f:dc:3e:40:cc:0b:aa:28: 5a:83:13:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2M0QxMTAvBgNVBAUTKEYyMjFFOTQzMkExOUYyODUwNzgzMUIxMkVEODZCQzRC QjU5NjM5ODEwHhcNMjUwODIyMTc0MjM5WhcNMjUwODI5MTc0MjM5WjAYMRYwFAYD VQQDEw02OGE4YWMxMC1iNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeqACr5wb79cD7Se2jETwTthPLa7i5F2j6Zim/8D8qqohBOiAv6H8Gv1avN+ KrgSqB1lBVjpcP444ObAQ5sVwxR+XZXle4YABLwRRYTEHJpHcNl/J7K7gQtG6ptt Ocn0jwsHiB3wxPei0q0IY4x17CPE5q6hs4kArmAyfr+lMH3o6DR485CIW3V3Qq4j jSJFZDdVa8jMD7jW1NZRHa6o4A80IO5aV16e7ozsjxIhFH79Lxxl+Eb8uyd0InCe +FT11lJGl8OYY/1xKY8uJpYZjbmkPsGYYvkhvkAzUzXYn+dM2jxR/O2CmP9cy60M djVc5t1sfXJ+qqE3BLGOQFhq8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLldgD/y 4mqfmVviXB8RFCNCRTbVMB8GA1UdIwQYMBaAFPIh6UMqGfKFB4MbEu2GvEu1ljmB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTYzRC9GOUM5NzY2Qzcy NjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhvVUhneHNTN1lhOFM3V1dP WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpSHBReW9aOG9VSGd4c1M3WWE4UzdXV09ZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTYzRC9GOUM5NzY2QzcyNjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhv VUhneHNTN1lhOFM3V1dPWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1HkgJZepMQVDLTYCxKXZ6oX8xSijsl7FERH9ZcS/pHf1jimZcRvcv W+5pe8ysqOsvtBFF2wIv4f1WLC0Ee+uv4sh/YhC0eypScE/Ha1xadgV+klt3/jT3 rkd7Ox79x17IX6mcoA+nLA8bEapXuByNBSS/lJr38vN4GRgiZK+llkSbPnDZVCTt PjT2jA3Z5BhMXJZsjN6kORxb3XikRd0PrnryYCOlttHWtiEFKd4e4bB/ToebHx3x MekiyrW2gCJmtOoWVTqLOKs2n7Hj3GiUo1Xmq5N1s8xoDuXZWkdPQr0CqOaT7AX1 6dt7SpO0QnpibloWH9w+QMwLqihagxP5 -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:57 2025 by rpki-client